Strengthen Cybersecurity capacities of European SMEs in line with CRA requirements and obligations

Closed

Programme Category

EU Competitive Programmes

Programme Name

Digital Europe Programme

Programme Description

Digital Europe Programme is the first EU programme that aims to accelerate the recovery and drive the digital transformation of Europe.

Worth €7.6 billion (in current prices), the Programme is a part of the next long-term EU budget, (the Multiannual Financial Framework), and it covers 2021 to 2027. It will provide funding for projects in five crucial areas: supercomputing, artificial intelligence, cybersecurity, advanced digital skills, and ensuring the wide use of digital technologies across the economy and society.

The Programme is fine-tuned to fill the gap between the research of digital technologies and their deployment, and to bring the results of research to the market – for the benefit of Europe’s citizens and businesses, and in particular SMEs. Investments under the Digital Europe programme supports the Union’s twin objectives of a green transition and digital transformation and strengthens the Union’s resilience and strategic autonomy.

Programme Details

Identifier Code

DIGITAL-ECCC-2024-DEPLOY-CYBER-06-STRENGTHENCRA

Call

Strengthen Cybersecurity capacities of European SMEs in line with CRA requirements and obligations

Summary

The objective of this topic is to support European SMEs, with a focus on micro and small enterprises, to strengthen their cybersecurity capacities and to support the implementation of the proposed Regulation on the Cyber Resilience Act (CRA).

Detailed Call Description

In synergy with other actions launched under this WP which will be developing compliance tools for the CRA, the action should distribute cascade financing grants to European SMEs, with a focus on micro and small enterprises, though remaining open to other stakeholders, to support achieving compliance with requirements and obligations stemming from the CRA.

Applicants are encouraged to identify categories of cascade financing recipients, including at least the following:

  • Manufacturers of products with digital components, including software developers.
  • Providers of tools and solutions that facilitate compliance with CRA obligations.
  • Other well-justified categories in line with CRA (e.g., distributors, importers, open-source community).

For each identified stakeholder category, a dedicated set of activities should be devised taking into consideration the specific needs of target consumers, business users, and other relevant stakeholders.

The proposed project should include actions addressing the following:

  • Awareness raising, dissemination and other stakeholder engagement actions with the focus on the cascade financing to European SMEs, with a focus on micro and small enterprises.
  • Managing an open call process to distribute cascade funding, including impartial evaluation of proposals and monitoring the implementation of grants.
  • Establish an openly available platform providing links to CRA-related resources that the proposed project itself would collect or develop or which would be available from external sources and supporting community building and upskilling. This includes for example a dedicated central repository website to allow easy finding of internal and external resources, step-by-step guidelines, compliance tools, training materials, free and open-source code implementations, and other relevant resources to achieve CRA compliance. This should include, amongst others, tools procured for this purpose under this work programme.
  • In close coordination with the EU Cybersecurity Skills Academy, perform trainings and upskilling of stakeholders to achieve CRA compliance, i.e. organise workshops, training sessions, and events, draft guidelines, supporting actions to facilitate interaction among European SMEs, including drafting reports or other material discussing the implementation of CRA compliance requirements and promoting awareness, including by contributing to relevant deliverables of standardisation bodies e.g. through a sectoral perspective and informed by the needs of companies on the ground.
  • Facilitate and share CRA compliance best-practices and use-cases.
  • Contribute to standardisation efforts, as appropriate, considering the activities of European and international standardisation that are directly relevant to the CRA implementation.

Third parties receiving grants should, in particular:

  • Engage in testing, detecting and addressing vulnerabilities, producing documentation, carrying out conformity assessment and implementing other measures necessary to comply with the CRA.
  • Participate in workshops, training sessions, and events that facilitate interaction among European SMEs, with a focus on micro and small enterprises, to discuss and implement CRA compliance.
  • Contribute to the proposed project’s efforts in collecting the needs and perspectives of SMEs towards CRA-related standardisation deliverables.

Indicatively one proposal is expected to be financed via this topic. Proposed projects should foresee at least 75% of the budget to be distributed for cascade financing grants.

Call Total Budget

€22.000.000

Financing percentage by EU or other bodies / Level of Subsidy or Loan

Grant for Support to Third Parties — 100% funding rate for the consortium, co-financing of 50% by the supported third

Project budget (maximum grant amount): €22 million per project

The grant awarded may be lower than the amount requested. The minimum budget for each topic as listed above is strongly recommended.

Thematic Categories

  • Justice - Security
  • Research, Technological Development and Innovation
  • Small-Medium Enterprises and Competitiveness

Eligibility for Participation

  • Central Government
  • International Organisations
  • Private Bodies
  • Researchers/Research Centers/Institutions
  • Small and Medium Enterprises (SMEs)
  • State-owned Enterprises

Eligibility For Participation Notes

In order to be eligible, the applicants (beneficiaries and affiliated entities) must:

  • be legal entities (public or private bodies)
  • be established in one of the eligible countries, i.e.:
    • EU Member States (including overseas countries and territories (OCTs)
    • EEA countries (Norway, Iceland, Liechtenstein)

Targeted stakeholders: This topic targets in particular national cybersecurity authorities, national cybersecurity competence centres, National Coordination Centres (as defined in Regulation (EU) 2021/887), private entities and any other relevant stakeholders with the capacity to aggregate demand from end beneficiaries, to launch tenders for procurement in the cybersecurity market space and to run downstream calls for allocating Financial Support to Third Parties by attracting SMEs. Multi-country consortia composition is not mandatory for this topic but will positively contribute to the impact of the action.

Call Opening Date

16/01/2024

Call Closing Date

26/03/2024

National Contact Point(s)

Ministry of Research, Innovation and Digital Policy
Directorate of Research and Innovation
Eleana Gabriel
Telephone: +357 22 691918
Email: egabriel@dmrid.gov.cy